Frequently Asked Questions

Many legal matters carry consequences that are not immediately apparent, whether financial, professional, or personal. If you are facing a court date, a criminal charge, a legal dispute, or a significant transaction, consulting with an attorney early is generally worthwhile. An initial consultation can help you understand your options and whether legal representation would benefit your situation.

Valley Legal charges $250 for an initial consultation of up to one hour. If both you and the attorney mutually agree to establish a representation relationship following the consultation, that $250 fee is credited toward the billing for your matter. Contact us with any questions about our fee arrangements.

No. Submitting a contact inquiry, calling the office, or exchanging preliminary information does not by itself create an attorney-client relationship. A relationship is established only when the firm has reviewed your matter, confirmed no conflict of interest exists, and both parties have agreed to the representation, typically in writing. Until then, please avoid sharing sensitive or highly confidential information.

Bring any documents related to your matter, such as court papers, police reports, contracts, correspondence, or other relevant paperwork. Writing down a brief timeline of events and a list of questions beforehand is also helpful. The more context you can provide, the more productive the consultation can be.

A statute of limitations is a legal deadline by which a claim must be filed in court. Missing the applicable deadline can result in losing your right to pursue the claim, regardless of its merits. Deadlines vary by type of claim and circumstances. If you believe you may have a legal claim, consult an attorney promptly.

Valley Legal is licensed to practice law in Virginia. Our ability to assist you depends on whether your legal matter falls under Virginia law or is pending in a Virginia court. If you live outside Virginia but have a matter connected to Virginia, contact us to discuss whether we may be able to help.

Valley Legal accepts credit cards, personal checks, cash, and certified funds. We also offer a financing option through a third-party provider for clients who need assistance managing the cost of representation. Contact us for more information about payment arrangements.

Remain calm and do not make statements to police without speaking to an attorney first. You have the right to remain silent and the right to counsel. Exercise both. Contact an attorney as soon as possible after an arrest, because early decisions, including bail, arraignment, and preliminary matters, can affect the rest of your case. Do not discuss your case with anyone other than your attorney.

Your first appearance depends on whether you face a misdemeanor or felony and which court your case is in. In General District Court, early hearings may address bond, counsel, and scheduling. For felony cases, a preliminary hearing may be scheduled to determine whether there is probable cause to send the case to the grand jury. For misdemeanors, the case may proceed to trial relatively quickly. Procedures vary by jurisdiction and the specific charges involved.

You have the right to remain silent under the Fifth Amendment, and you may exercise it politely. You are generally required to identify yourself in certain circumstances in Virginia, but you are not required to answer questions or provide explanations. Statements made to law enforcement, even when intended to be helpful, can sometimes be used against you later. Before answering questions about any matter under investigation, speaking with an attorney is advisable.

In Virginia, misdemeanors are the less serious category of criminal offense, generally carrying potential penalties of fines and up to 12 months in jail. Felonies are more serious offenses carrying potential penalties that may include more than 12 months of incarceration. Both can result in a permanent criminal record. The classification and potential penalties depend on the specific offense. Consult an attorney about your particular situation.

Whether a first offense results in jail time depends on the specific charge, the facts of the case, the applicable law, and the practices of the jurisdiction. Many first offenses do not result in active jail sentences, and Virginia law provides some alternatives and first-offender programs for certain charges. However, some first offenses carry mandatory minimums or are serious enough that jail is a genuine possibility. We cannot promise any specific outcome. Consulting with an attorney before your court date is important.

Charges can sometimes be reduced or dismissed, depending on the evidence, the applicable law, any procedural issues, and the facts of the specific case. Virginia prosecutors have discretion in how cases are handled. Whether a reduction or dismissal is possible depends on factors specific to your situation. We do not promise any particular outcome.

A criminal conviction in Virginia generally remains on your record indefinitely unless it is sealed or expunged under applicable law. An arrest that does not result in a conviction may also appear on your record until it is expunged. Virginia has expanded its record-sealing laws in recent years, but not all charges or convictions are eligible. Consulting with an attorney can help you understand your specific situation.

Virginia law allows expungement or sealing for certain records, including charges that were acquitted, dismissed, or nolle prossed, as well as certain convictions under the Virginia Clean Slate Act. Not all records are eligible, and the process involves filing a petition in Circuit Court. Whether your record qualifies depends on the specific charges and their disposition. An attorney can review your record and advise you on eligibility.

Legal fees vary depending on the complexity of the matter, the charges involved, whether the case proceeds to trial, and other factors. Valley Legal uses flat fee arrangements where possible so that clients understand the cost of representation before it begins. Our initial consultation is $250 for up to one hour, credited toward billing if we mutually agree to establish a representation relationship. Contact us to discuss the specifics of your matter and what representation would involve.

Whether to hire an attorney is your decision, and Virginia courts allow individuals to represent themselves. However, even a first criminal charge can have lasting consequences, including a permanent record, effects on your driver's license, and impacts on employment or housing. An attorney can help you understand what you are actually facing and what options may be available. Consulting with one before making any decisions is generally advisable, even if you ultimately proceed differently.

Yes. In Virginia, reckless driving is a Class 1 misdemeanor criminal offense, not merely a traffic infraction. A conviction results in a criminal record, not just points on your driving record. This surprises many out-of-state drivers and even some Virginia residents who assume a traffic summons is no different from a speeding ticket.

Under Virginia Code § 46.2-862, reckless driving by speed includes driving 20 mph or more over the posted speed limit, or driving at any speed over 85 mph regardless of the posted limit. Both trigger a Class 1 misdemeanor charge. The 85 mph threshold catches many drivers on highways with 65 or 70 mph limits, even when they are less than 20 mph over the posted speed.

A DUI conviction under Virginia Code § 18.2-266 carries a mandatory license revocation period, which varies with the number of prior offenses and the circumstances. A reckless driving conviction can result in a discretionary suspension of up to six months. Additionally, Virginia's administrative license suspension takes effect at the time of a DUI arrest, before any conviction. The specifics depend on the facts of your case.

In most cases, yes. Reckless driving is a criminal charge, not a traffic infraction that can simply be paid off. Virginia generally requires a personal appearance for misdemeanor criminal charges. An attorney may be able to appear on your behalf in certain limited circumstances, but you should not assume you can simply pay a fine and avoid court. Consult an attorney promptly after receiving a reckless driving summons.

In some cases, a DUI charge in Virginia is resolved through a plea to reckless driving, sometimes called a wet reckless. Whether this is possible depends on the specific facts, the blood alcohol level, the jurisdiction, the prosecutor's approach, and other factors. A reduction is not available in every case, and we cannot promise any specific outcome.

A first DUI conviction under Virginia Code § 18.2-266 carries a mandatory minimum fine of $250, license revocation for one year, and mandatory enrollment in the Virginia Alcohol Safety Action Program (VASAP). There is no mandatory minimum jail sentence for a first offense at a BAC of 0.08 to 0.14, but a BAC of 0.15 or above triggers mandatory minimum jail time. Additional penalties may apply depending on the facts. The outcome in any specific case depends on those facts and circumstances.

Reckless driving in Virginia is a Class 1 misdemeanor. Penalties can include a fine of up to $2,500, up to 12 months in jail, six demerit points on your driving record that remain for 11 years, and a possible license suspension of up to six months. The actual consequences in a particular case depend on the speed, the driver's record, the jurisdiction, and other factors. We do not promise any specific outcome.

Jail is possible for both offenses. For DUI, mandatory minimum jail terms apply at higher BAC levels. For reckless driving, some Virginia courts impose jail for very high speeds even on a first offense. The likelihood depends on the specific facts, the applicable law, and the practices of the court where your case is pending. Consulting with an attorney familiar with the local jurisdiction is important.

A reckless driving conviction adds six demerit points to your Virginia driving record, and those points remain for 11 years. A DUI conviction also results in six demerit points. Points from traffic and criminal convictions can trigger license suspension if they accumulate, and they are visible to insurance companies, which often raise rates significantly after such convictions.

Both convictions appear on a criminal record and may be discovered in background checks. A DUI or reckless driving conviction can be particularly significant for commercial drivers, government employees, security clearance holders, and professionals in licensed fields. We are not in a position to advise you on how any specific employer or agency would respond, as that depends on their policies and applicable rules, but these are legitimate concerns worth discussing with an attorney.

A reckless driving or DUI conviction is generally not eligible for expungement or sealing under current Virginia law. However, if a reckless driving or DUI charge was dismissed, nolle prossed, or resulted in acquittal, the arrest record may be eligible for expungement. Virginia's Clean Slate Act has expanded sealing eligibility for certain convictions, but DUI and reckless driving convictions are not currently among the qualifying offenses. Consult an attorney to evaluate your specific record.

Steps taken before court can sometimes be relevant to how a matter is resolved. These may include completing a driver improvement course, gathering documentation of your driving record and employment, and consulting with an attorney well before your court date. We are not in a position to promise that any particular step will produce a specific result, and what is appropriate varies by charge, jurisdiction, and the facts. Speaking with an attorney early gives you the best opportunity to understand your options.

Virginia law generally allows expungement of charges that were dismissed, nolle prossed (the prosecution declined to proceed), or resulted in acquittal at trial. Eligibility depends on the specific charge and disposition. An attorney can review your record and advise whether you qualify to petition under Virginia Code § 19.2-392.2 and related statutes.

If a DUI charge was dismissed, nolle prossed, or resulted in acquittal, the arrest record may be eligible for expungement. If the DUI charge was reduced to reckless driving and you were convicted of reckless driving, the situation is more complex and depends on the specific disposition. Consult an attorney to evaluate your specific record and circumstances.

A reckless driving conviction is generally not eligible for expungement under current Virginia law. If the reckless driving charge was dismissed or you were found not guilty, the record of that charge may be eligible for expungement. The Virginia Clean Slate Act addresses certain conviction sealing, but reckless driving convictions are not among the currently qualifying offenses. Consult an attorney about your specific situation.

In Virginia, both terms generally refer to restricting public access to a criminal record. A sealed or expunged record is not destroyed; it remains accessible to certain government agencies, law enforcement, and courts, but it is removed from the public records checks used by most employers and landlords. Virginia's Clean Slate Act created automatic sealing for certain records. Other records require a petition to the Circuit Court. The practical effect is that the record no longer appears in standard commercial background checks.

Eligibility depends on the type of record and its disposition. Charges that were acquitted, dismissed, or nolle prossed are generally eligible for petition-based expungement. The Clean Slate Act provides for automatic sealing of certain misdemeanor and some lower-level felony convictions after a qualifying waiting period with no subsequent offenses. Certain offenses, including violent crimes and sexual offenses, are not eligible. An attorney can assess your specific record.

The timing depends on the type of record you are seeking to clear. For charges that were dismissed or resulted in acquittal, a petition may generally be filed after the matter concludes. For conviction-based sealing under the Clean Slate Act, a waiting period applies that varies by offense type. An attorney can advise you on the applicable timeline for your specific record.

A typical expungement petition requires certified copies of court records showing the charge and its disposition, the petition itself, and in some cases a criminal history report from the Virginia State Police. The Virginia State Police is notified and has an opportunity to respond. Specific requirements may vary by Circuit Court. An attorney can help you gather the necessary materials and prepare the petition correctly.

The timeline varies by jurisdiction and the circumstances of the petition. After filing, the court notifies the Virginia State Police, which has an opportunity to respond. A hearing may be scheduled. In straightforward cases, the process may take several months. In contested matters or courts with full dockets, it may take longer. We cannot predict the timeline in any specific case.

If a petition for expungement is granted, the record is sealed from public view and generally will not appear in standard commercial background checks used by most employers. However, certain government agencies, law enforcement, courts, and licensing boards retain access to sealed records in some circumstances. The practical effect on a particular background check depends on the nature of the check and who is conducting it. Consult an attorney for guidance specific to your situation.

A pardon from the Governor of Virginia may restore certain rights affected by a conviction, but it does not automatically expunge or seal the underlying record. A pardon and an expungement are distinct legal remedies. Whether a pardon affects your eligibility for expungement or sealing under Virginia law depends on the type of pardon and the applicable statutes. An attorney can advise you on how a pardon in your situation interacts with Virginia's expungement laws.

Virginia law provides three types of protective orders. An emergency protective order (EPO) is issued by law enforcement or a magistrate and lasts up to 72 hours; it is typically issued when there is an immediate threat. A preliminary protective order (PPO) is issued by a court after an ex parte hearing and lasts up to 15 days, until a full hearing can be held. A final protective order is issued after a full hearing with both parties present and can last up to two years, or longer in certain circumstances.

Emergency protective orders last up to 72 hours. Preliminary protective orders last up to 15 days. Final protective orders may last up to two years for most domestic matters, and may be extended under certain circumstances. The terms and duration depend on the specific order entered by the court and the nature of the underlying case.

At a full protective-order hearing, the court may consider testimony from both parties, written statements, photographs, medical records, police reports, text messages and electronic communications, and other relevant evidence. The court is not bound by the strict rules of evidence that apply in criminal trials. The petitioner bears the burden of showing by a preponderance of the evidence that a protective order is warranted.

Yes. A protective order and a related criminal charge are separate proceedings, but they can affect each other significantly. If you are subject to a protective order, violating it is itself a criminal offense. Testimony and findings from a protective order hearing can also be relevant to related criminal proceedings. If you face both a protective order and criminal charges arising from the same events, consulting with an attorney who can advise you on both proceedings is important.

If you are subject to a protective order that prohibits contact, you generally cannot legally respond to contact with the protected person, regardless of who initiates it. The order runs against you, and the protected person cannot unilaterally waive its terms. Responding to contact from the protected person can constitute a violation of the order even if you did not initiate it. Review your specific order carefully and consult an attorney with any questions about what it permits.

Violating a protective order in Virginia is a criminal offense. A first violation is generally a Class 1 misdemeanor under Virginia Code § 16.1-253.2. Subsequent violations, or violations involving certain aggravating circumstances, can be charged as felonies. A violation may also result in arrest without a warrant and can affect related criminal proceedings and the likelihood of a more restrictive order being entered.

Yes. A final protective order can prohibit you from possessing firearms under both Virginia and federal law. If you share a residence with the person who obtained the order, the order may require you to vacate that residence. A protective order can also be relevant in custody and visitation proceedings, as courts take domestic safety seriously in family matters. The specific effects depend on the terms of the order entered in your case.

A false accusation of domestic assault is a serious matter and should be treated accordingly. You have the right to remain silent and the right to counsel. Do not attempt to confront or contact the accuser. Do not discuss the matter with anyone other than your attorney. Gather any evidence that may support your account, including communications, witnesses, and documentation. Consulting an attorney as early as possible, including before any court hearing, is important.

Yes. A protective order can be dismissed or modified under appropriate circumstances. A petitioner may ask to have an order dismissed if they no longer wish it to remain in effect, though courts are not required to grant such requests automatically. A respondent may seek modification or dismissal based on a material change in circumstances. The process involves a hearing before the court that issued the order. An attorney can advise you on the grounds and procedure for seeking modification.

You are not required to have an attorney, but a protective-order hearing can have significant legal and practical consequences, including effects on a related criminal case, firearms rights, housing, and custody. Both petitioners seeking a protective order and respondents contesting one can benefit from legal guidance. The hearing involves presenting evidence and legal argument, and the outcome can affect your rights and circumstances for years.

The consequences of a drug possession charge in Virginia depend on the substance involved and the quantity. Possession of most controlled substances under Virginia Code § 18.2-250 is a criminal offense ranging from a misdemeanor to a felony depending on the schedule. Virginia law also provides a first-offender deferral option under § 18.2-251 for some qualifying individuals, which may allow dismissal of the charge upon completion of conditions. Consulting with an attorney about the specific charge and your eligibility for any available programs is an important early step.

Searches must generally comply with the Fourth Amendment to the United States Constitution. If law enforcement conducted a search without a valid warrant, without your consent, or without a recognized exception to the warrant requirement, the search may be challenged through a motion to suppress in court. Evidence obtained through an unlawful search may be excluded. Whether a challenge is available and likely to succeed depends on the specific facts and circumstances. An attorney can evaluate whether suppression is a viable option in your case.

Common defenses in Virginia assault and battery cases include self-defense, defense of others, consent, and factual disputes about what occurred. Virginia law recognizes a right to use reasonable force in self-defense when a person reasonably believes they face imminent harm. The availability and strength of any defense depends on the specific facts and the evidence in the case. We do not promise any particular outcome.

Simple possession means knowingly possessing a controlled substance for personal use. Intent to distribute means possessing a controlled substance with the purpose of selling or transferring it to others. Intent to distribute is a more serious charge and carries significantly greater penalties. Intent is often inferred from circumstances such as the quantity of the substance, packaging, the presence of scales or large amounts of currency, or communications suggesting sales. The specific charges and potential penalties depend on the substance, the quantity, and the facts.

Certain criminal convictions, including felony convictions and convictions for certain domestic violence misdemeanors, can prohibit firearm possession under both Virginia law (§ 18.2-308.2) and federal law (18 U.S.C. § 922(g)). A final protective order may also restrict firearms. The specific impact depends on the charge, the disposition, and applicable law. Consulting with an attorney about how a particular charge could affect your firearms rights is an important consideration.

Failing to appear for a scheduled court date in Virginia is itself a criminal offense under Virginia Code § 19.2-128, and the court will typically issue a bench warrant for your arrest. A bench warrant remains active until you are taken into custody or the matter is resolved with the court. Your driver's license may also be suspended for failure to appear. If you have a bench warrant, consulting with an attorney about how to address it proactively is advisable.

Yes. In Virginia, individuals under the age of 18 are generally charged in the Juvenile and Domestic Relations District Court rather than adult criminal court. That court focuses on rehabilitation and has different procedures and disposition options. Juvenile records are generally confidential and subject to sealing. However, serious felony charges can result in transfer to Circuit Court for trial as an adult. Parental involvement is an important part of the juvenile process.

Probation is a court-ordered period of supervision that may be imposed instead of, or in addition to, incarceration. Conditions commonly include regular check-ins with a probation officer, restrictions on travel, drug testing, and avoidance of new criminal charges. A probation violation can result in a show cause hearing, and if the violation is found to have occurred, the court may impose a suspended sentence, impose additional conditions, or extend the probation period. The consequences depend on the nature of the violation and the court's discretion.

Whether you can travel, and to where, while your case is pending depends on the conditions of your bond or release. Some bond conditions restrict travel within or outside Virginia. If you are on bond, review your bond conditions carefully and consult your attorney before making any travel plans. Traveling in violation of bond conditions can result in revocation of bond and additional consequences.

The right choice depends on your business goals, the number of owners, how you plan to fund the business, your exit strategy, and tax considerations, among other factors. LLCs offer flexible management and pass-through taxation in most cases. Corporations may be preferable if you plan to seek outside investment, issue stock options, or eventually pursue an acquisition. Each structure has tradeoffs. The decision is worth discussing with both a business attorney and a tax advisor.

Virginia does not require a single-member LLC to have an operating agreement, but having one is generally advisable. Without one, your LLC is governed by Virginia's default LLC statutes, which may not fit your circumstances. A well-drafted operating agreement confirms the owner's intentions, may be required by banks or investors, and can help maintain the separation between business and personal assets.

A comprehensive agreement typically addresses management authority and decision-making, profit and loss allocation, capital contributions, transfer restrictions on ownership interests, what happens when an owner wants to leave or dies, how deadlock is resolved, and the process for dissolving the business. The specific provisions depend on the structure and goals of the business and its owners.

A 50/50 deadlock between owners who cannot agree can paralyze a business. Whether the deadlock can be resolved, and how, depends on what the operating or shareholder agreement says. A well-drafted agreement often includes a deadlock-breaking mechanism, such as a buyout right or a mediation requirement. Without such provisions, the owners may face litigation or, in extreme cases, judicial dissolution. Virginia courts can dissolve an LLC or corporation when deadlock makes continued operation not reasonably practicable.

If you believe a co-owner is wrongfully excluding you from business decisions or distributions, the first step is to review your operating or shareholder agreement to understand your rights. Virginia law also imposes fiduciary duties on members and managers of LLCs and on officers and directors of corporations. Depending on the facts, potential remedies may include a demand for access to records, a derivative suit, or a claim for breach of fiduciary duty. The available options depend on the entity type, the governing documents, and the specific facts.

Minority shareholder oppression refers to conduct by controlling owners that unfairly prejudices minority owners, such as excluding them from management, withholding distributions, or using company resources for the benefit of the majority at the expense of the minority. Virginia courts recognize oppression claims in closely held corporations, and remedies may include buyout orders or other relief. The standard and available remedies depend on the facts and applicable Virginia law.

Yes. Members and managers of Virginia LLCs, and officers and directors of Virginia corporations, owe fiduciary duties, including duties of care and loyalty, to the entity and in some circumstances to fellow owners. A breach of those duties can give rise to a claim for damages. The business judgment rule provides some protection for good-faith business decisions, but self-dealing, conflicts of interest, and willful misconduct are not protected. The facts of the specific situation determine whether a viable claim exists.

The distinction is primarily about entity type. Partnership disputes arise in general partnerships, limited partnerships, or LLPs and are governed by partnership law and the partnership agreement. Shareholder disputes arise in corporations and are governed by corporate law and any shareholder or buy-sell agreement. Member disputes in LLCs involve similar issues but under LLC statutes and the operating agreement. The underlying principles, including fiduciary duties, distribution rights, and access to records, are similar, but the specific legal framework differs.

A buy-sell agreement establishes in advance what happens to an owner's interest when a triggering event occurs, such as death, disability, retirement, or a desire to exit. It typically sets a price or valuation method, identifies who can purchase the interest, and specifies the terms. Businesses with multiple owners benefit from a buy-sell agreement before a triggering event occurs, not during a crisis. Without one, a departing owner's interest may end up in unintended hands or become the subject of litigation.

Using company funds for personal expenses without authorization, or taking a business opportunity that belongs to the company, can constitute a breach of fiduciary duty and may also support claims for conversion or fraud, depending on the facts. Remedies may include disgorgement of improperly obtained funds or profits and damages. In some circumstances, conduct of this type may also give rise to criminal liability. The first step is documenting the conduct and reviewing the governing documents and applicable law. Consulting with an attorney promptly is important.

Whether a buyout can be compelled depends on the governing documents and applicable Virginia law. Some operating and shareholder agreements include mandatory buyout provisions triggered by certain events. Absent such a provision, a forced buyout generally requires litigation, and the availability of that remedy depends on whether grounds such as oppression or deadlock can be established. Courts have discretion to order a buyout as an alternative to dissolution in appropriate circumstances.

A contract dispute becomes a lawsuit when one or both parties file a complaint in court. Before that point, disputes are often addressed through demand letters, negotiation, or mediation. Whether filing suit is the right course depends on the amount in dispute, the strength of the legal position, the cost of litigation relative to the potential recovery, and whether other resolution methods have been tried. Virginia's General District Court handles claims up to $25,000; the Circuit Court handles claims above that threshold.

Do not ignore a demand letter. Read it carefully to understand what is being claimed and what the deadline is. Preserve all documents related to the dispute. Avoid responding without first consulting an attorney, because your response, or lack of one, can affect your legal position. A demand letter does not mean a lawsuit has been filed, but ignoring one can result in the other party proceeding directly to litigation without further notice.

Virginia law significantly limits non-compete agreements for lower-wage workers under § 40.1-28.7:8. For employees not covered by that statute, non-compete clauses must be reasonable in duration, geographic scope, and the scope of restricted activities to be enforceable. Courts do not always rewrite overbroad agreements; some Virginia courts have voided them entirely. Non-solicitation agreements covering clients or employees are subject to a similar, though sometimes less strict, reasonableness analysis. Whether a particular clause is enforceable depends on its specific terms and the circumstances.

It is generally worthwhile to consult an attorney before sending or responding to a formal demand, before terminating a contract, or when a dispute involves a significant dollar amount, ongoing business relationships, or potential claims of fraud or breach. Early involvement of counsel can help clarify your rights, preserve your legal position, and sometimes resolve disputes before they escalate to litigation. Waiting until a lawsuit is filed often limits your options.

Virginia's Consumer Data Protection Act (VCDPA), effective January 1, 2023, applies to businesses that process personal data of at least 100,000 Virginia consumers per year, or at least 25,000 consumers per year if more than 50% of the business's gross revenue comes from the sale of personal data. Even businesses below those thresholds may have obligations under Virginia's data breach notification statute, federal sector-specific laws, and contractual requirements. Assessing whether and how Virginia law applies requires looking at your specific data practices.

Whether a privacy policy is legally required depends on the applicable laws and the nature of your business. The VCDPA requires covered businesses to provide consumers with a clear and accessible privacy notice. The FTC has taken enforcement action against companies for deceptive or inadequate privacy disclosures. Many federal laws impose disclosure requirements in specific sectors, including HIPAA for health information and COPPA for children's data. Even if not strictly required by applicable law, a privacy policy is generally considered good practice and helps set clear expectations for visitors.

Whether a consent mechanism is required depends on the tracking technologies you use, the applicable laws, and your data practices. The VCDPA requires covered businesses to give consumers a clear and accessible means to opt out of the sale of personal data and targeted advertising, which can include cookie-based tracking. A number of laws and regulatory frameworks also require disclosure of tracking technologies in privacy notices. The appropriate approach depends on your specific data practices, the applicable law, and your user base.

In the first 24 to 72 hours, the priorities are containing the breach, preserving evidence, and engaging legal counsel and your cyber insurer. Virginia Code § 18.2-186.6 imposes notification obligations when personal information of Virginia residents is compromised, and other laws may require faster action. Engaging an attorney early helps preserve attorney-client privilege over the breach investigation and ensures your response is legally sound. Avoid making public statements or notifying regulators before you have legal guidance.

Virginia's breach notification statute requires notification to affected individuals without unreasonable delay. Businesses affecting more than 1,000 Virginia residents must also notify the Virginia Attorney General. Federal laws impose additional requirements depending on the type of data: HIPAA requires notification within 60 days for breaches of protected health information, and financial institutions face their own notification rules. Contractual obligations may also specify notification timeframes, sometimes shorter than statutory requirements.

An incident response plan (IRP) is a documented procedure describing how your organization will detect, contain, investigate, and recover from a cybersecurity incident. It identifies roles and responsibilities, escalation paths, legal notification obligations, and communication protocols. Virginia's VCDPA requires covered businesses to implement reasonable security practices, and regulators and courts increasingly view a written IRP as part of what that means. For businesses that handle personal or sensitive data, having a plan before an incident occurs is far preferable to developing one during a crisis.

Vendor due diligence for software handling personal or sensitive data should include reviewing the vendor's security certifications such as SOC 2 Type II, their incident response and breach notification practices, data storage location, their use of subprocessors, and their contractual terms. A data processing agreement should address security standards, breach notification timelines, data return or deletion on termination, and liability allocation. The VCDPA requires covered businesses to have written contracts with processors that address specific requirements.

A privacy impact assessment (PIA), sometimes called a data protection assessment, is a structured review of a processing activity to identify and address privacy risks before they occur. The VCDPA requires covered businesses to conduct data protection assessments for certain higher-risk processing activities, including targeted advertising, the sale of personal data, and processing of sensitive data. A PIA is also a useful tool when launching a new product, changing how you collect data, or entering a vendor relationship involving personal information.

The legality and risk of using AI tools with customer or employee data depends on the type of data involved, the applicable laws, your vendor agreement with the AI provider, and your privacy disclosures. Using AI tools with personal data triggers VCDPA and other applicable privacy obligations, including disclosure requirements and restrictions on sharing data with third parties. Using AI in hiring or employment decisions also implicates EEOC guidance and, in some contexts, federal law. Reviewing your AI use practices in light of applicable legal requirements is advisable.

Virginia's VCDPA requires covered businesses to implement reasonable security practices appropriate to the size and nature of the business and the sensitivity of the data involved. The FTC applies similar standards. Common baseline expectations include access controls, encryption of sensitive data, employee security training, patch management, and a written security policy. For law firms, the Virginia State Bar has issued guidance requiring competence in technology and data security as part of the duty of competence under the Virginia Rules of Professional Conduct.

Yes. Law firms hold highly sensitive client information, including confidential communications protected by the attorney-client privilege. A breach of that information can harm clients directly and give rise to professional responsibility concerns. The Virginia State Bar has issued guidance, including Legal Ethics Opinion 1872, addressing lawyers' duties to protect client data, choose appropriate technology, and respond to data incidents. Law firms are also attractive targets for cybercriminals because of the sensitive information they hold.

Contracts with vendors, customers, or partners who handle your data or have access to your systems should address the security standards the other party must maintain, how and when they must notify you of a breach, their liability and indemnification obligations if they cause or fail to contain a breach, audit rights, restrictions on subprocessors, and data return or deletion obligations on termination. These provisions are often overlooked in standard vendor agreements, and the absence of adequate terms can significantly complicate your response to a breach.